tftpd.1m (2010 09)
t
tftpd(1M) tftpd(1M)
or a file. tftpd disallows a client access to any file that does not match entirely or in its initial
components one of the restriction path s. It also disallows access to any file path containing ‘‘
..’’.
However, an accessed file can be a symbolic link that points outside the set of restricted paths.
• If any path is specified on the command line and the
tftp home directory is defined and is not /
,
tftpd first looks for a file relative to (under) the home directory. If the file is not found there,
then tftpd looks for the file relative to
/ with path restrictions applied. Thus if two files with the
same name can be found in both locations,
tftpd accesses the one under tftp’s home directory.
Note that
inetd allows continuation of command lines in
inetd.conf by ending continued lines with
a backlash.
Defining the
tftp pseudo-user is strongly recommended even when path s are specified, because client
access is further restricted to files that can be read and/or written by this pseudo-user. It is safe to set the
tftp pseudo-user’s home directory to
/ in this case.
DIAGNOSTICS
The following diagnostics are logged to the
syslogd facility at the err log level (see syslogd(1M)).
No security mechanism exists
The pseudo-user tftp was not found in the password database (
/etc/passwd), and tftpd
was invoked without any path arguments.
Add or correct the entry for the pseudo-user
tftp in the password database /etc/passwd.
Or, add an access list (path arguments) to the tftpd arguments in the inetd configuration
file /etc/inetd.conf
. Reconfigure inetd with the command inetd -c.
Unknown option option ignored
An invalid option was specified in the tftpd arguments in the inetd configuration file
/etc/inetd.conf.
Remove or correct the option. Restart
inetd with the command inetd -c.
Invalid total timeout value
The value given for the -T option was not a number or was a negative number.
Correct the value given for the
-T option. Reconfigure inetd with the command inetd -c
.
Invalid retransmission timeout
value
The value given for the
-R option was not a number or was a negative number.
Correct the value given for the
-R option. Reconfigure inetd with the command inetd -c
.
system call
:
The named system call failed. See the corresponding manual entry for a description of the sys-
tem call. The reason for the failure is explained in the error message appended to the system
call.
WARNINGS
When invoked with no path arguments,
tftpd cannot follow symbolic links that refer to paths outside of
the home directory of the pseudo-user tftp, because it performs a chroot().
AUTHOR
tftpd was developed by the University of California, Berkeley, and Hewlett-Packard.
SEE ALSO
tftp(1), inetd(1M), syslogd(1M), chroot(2), inetd.conf(4), passwd(4).
STANDARDS CONFORMANCE
tftpd: RFC783, RFC2347, RFC2348, RFC2349.
2 Hewlett-Packard Company − 2 − HP-UX 11i Version 3: September 2010